High severity8.8NVD Advisory· Published Jan 28, 2026· Updated Jun 17, 2026
CVE-2020-36969
CVE-2020-36969
Description
M/Monit 3.7.4 contains a privilege escalation vulnerability that allows authenticated users to modify user permissions by manipulating the admin parameter. Attackers can send a POST request to the /api/1/admin/users/update endpoint with a crafted payload to grant administrative access to a standard user account.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:tildeslash:m\/monit:3.7.4:*:*:*:*:*:*:*
- Tildeslash Ltd./M/Monitv5Range: 3.7.4
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/49080nvdExploitThird Party AdvisoryVDB Entry
- www.vulncheck.com/advisories/mmonit-privilege-escalationnvdThird Party Advisory
- mmonit.comnvdProduct
News mentions
0No linked articles in our index yet.